Paragon AI Ltd (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. This policy explains how we collect, use and protect personal data when you visit paragonai.co.uk, contact or enquire with us, or become a client. We process personal data in accordance with the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003, as amended by the Data (Use and Access) Act 2025.
Scope. This policy covers personal data for which Paragon AI Ltd is the data controller. Where we process landlord or enquiry data on behalf of a client through the Landlord Acquisition System, we act as a data processor, and that processing is governed by our services agreement and data processing terms with that client, not by this policy.
1. Who we are
Paragon AI Ltd is the data controller. Company number 17188988, registered office Hill Crest, Wrexham, LL13 0JR. We are registered with the Information Commissioner’s Office (registration number 00014597457). For any privacy matter, contact us at michael@paragonai.co.uk.
2. The personal data we collect
Website visitors and enquirers
Your name, email address, phone number and the contents of any message or booking you submit through our contact form or booking calendar; and technical data such as your IP address, browser type and information collected via cookies and analytics.
Prospective clients
Business contact details (such as name, job role, business email, phone number and company) of letting agents and similar businesses, sourced from public and professional sources for the purpose of business-to-business marketing.
Clients
The contact, billing and account-access information we need to set up and deliver our services to you.
3. How we collect it
- directly from you, when you complete a form, book a call, email us, or become a client;
- automatically, through cookies and analytics when you use the Website; and
- from public and third-party sources (such as public business listings and professional networks) when we identify businesses that may benefit from our services.
4. Why we use it, and our lawful bases
- To respond to enquiries and provide our services — performance of a contract, and our legitimate interests in operating our business.
- For business-to-business marketing and outreach — our legitimate interests in promoting our services to relevant businesses, conducted in accordance with the electronic marketing rules in PECR. You can object or opt out at any time.
- To operate and improve the Website — our legitimate interests, and your consent for any non-essential cookies.
- To meet legal, accounting and regulatory obligations — compliance with a legal obligation.
5. Marketing and outreach
We carry out business-to-business marketing to relevant businesses on the basis of our legitimate interests and the applicable PECR rules. Every marketing message identifies us and offers a simple way to opt out. You can stop receiving marketing at any time by using the unsubscribe option, replying to ask us to stop, or emailing us. We will action your request promptly.
6. Cookies and analytics
The Website uses cookies. Essential cookies are necessary for the Website to function. Non-essential cookies (such as analytics that help us understand how the Website is used) are only set with your consent, which you can give or withdraw via our cookie banner or your browser settings.
7. Who we share it with
We do not sell your personal data. We share it only with trusted service providers who process data on our behalf to help us run our business and deliver our services. Depending on the service, these may include:
- hosting and workflow infrastructure providers (e.g. Elestio);
- AI and language-model providers (e.g. OpenRouter) and memory/data-store providers (e.g. Upstash);
- messaging providers (e.g. Meta Platforms / WhatsApp Business);
- email, document and productivity providers (e.g. Google Workspace, DocuSign);
- scheduling and outreach tools (e.g. Cal.com, Instantly); and
- payment processors and our professional advisers.
We may also disclose personal data where required by law, or to establish, exercise or defend legal claims.
8. International transfers
Some of our service providers are located outside the UK, including in the United States. Where personal data is transferred outside the UK, we take steps to ensure it is protected by an appropriate safeguard — such as a UK adequacy decision, the UK International Data Transfer Agreement, or standard contractual clauses — so that it receives a level of protection consistent with UK data protection law.
9. How long we keep it
We keep personal data only for as long as necessary for the purposes for which it was collected, including to meet any legal, accounting or reporting requirements. Enquiry and prospect data is kept while there is a legitimate business reason to do so; client data is kept for the duration of our engagement and for a reasonable period afterwards.
10. Your rights
Subject to certain conditions, you have the right to: access your personal data; have it corrected or erased; restrict or object to its processing; data portability; and withdraw consent at any time where we rely on consent. To exercise any right, contact us at the address above. We will acknowledge your request and respond within the timeframes required by law. If you are unhappy with how we handle your data or a complaint, you can also complain to the Information Commissioner’s Office at ico.org.uk.
11. Security
We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse, and we restrict access to those who need it.
12. Children
Our Website and services are directed at businesses and are not intended for children. We do not knowingly collect personal data from children.
13. Changes to this policy
We may update this policy from time to time. The version published on the Website applies, and we will update the “Last updated” date above when we make changes.
14. Contact
For any privacy question or to exercise your rights, contact us at michael@paragonai.co.uk. Information Commissioner’s Office: ico.org.uk, helpline 0303 123 1113.